While fixing one security issue for 1.0.3.Final I broke something. If there's a hyphen in the domain name (for example OpenShift) login-status-iframe.html fails to load. Fix and release coming asap!